CVE Catalog

CVE-2023-47359

Critical
Published: Translated: NVD NIST

Summary

Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket() and results in memory corruption.

Risk Assessment

Memory corruption may lead to unauthorized data access or execution of malicious code, posing a serious security threat to the system.

Recommendation

It is recommended to update VLC to version 3.0.20 or later to mitigate this vulnerability.

Original NVD description (English source)

Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket() and results in a memory corruption.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS